UBUNTU-CVE-2021-39894

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks...

CVE-2021-39867

In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks...

Server side request forgery (ssrf)

In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks...

CVE-2021-39894

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks...

CVE-2021-39894

In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks...

CVE-2021-39867

In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks...

CVE-2021-39867

Removed by vendor...

CVE-2021-39867

CVE-2021-39867 affects GitLab CE/EE since v8.15, due to a DNS rebinding vulnerability in the Gitea Importer that can enable Server-Side Request Forgery (SSRF). Impact is partial confidentiality/integrity and network-exposed risk; no exploitation details are provided beyond the SSRF description. R...

PT-2021-22714 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.15 and later Description: A DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side Request Forgery SSRF attacks. This issue allows an attacker to potentially access interna...

PT-2021-22740 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.0 and later Description: A DNS rebinding vulnerability exists in the Fogbugz importer, which may be used by attackers to exploit Server Side Request Forgery attacks. This issue affects all versions of GitLab CE/EE sinc...

GitLab 代码问题漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug list, and more. A code issue vulnerability exists in GitLab, which stems...

PYSEC-2021-338

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py...

Leo-Editor 安全漏洞

Leo-Editor is an open source Ide, Outline, and Pim from Edward K. Ream, an individual developer in the U.S. It is used to speed up the workflow of programmers, authors, and web designers. A security vulnerability exists in Leo-Editor version 6.2.1 due to a regular expression denial of service...

PT-2021-10901 · Unknown · Leo Editor

Name of the Vulnerable Software and Affected Versions: Leo Editor version 6.2.1 Description: The issue is related to a regular expression denial of service ReDoS vulnerability in the component plugins/importers/dart.py. This vulnerability was discovered in the Leo Editor. Recommendations: For Leo...

WordPress server-side request forgery vulnerability (CNVD-2021-59062)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A server-side request forgery vulnerability exists in the WordPress Podcast Importer SecondLine...

CVE-2020-24149

Server-side request forgery SSRF in the Podcast Importer SecondLine podcast-importer-secondline plugin 1.1.4 for WordPress via the podcastfeed parameter in a secondlineimportinitialize action to the secondlinepodcastimport page...

CVE-2020-24149

Server-side request forgery SSRF in the Podcast Importer SecondLine podcast-importer-secondline plugin 1.1.4 for WordPress via the podcastfeed parameter in a secondlineimportinitialize action to the secondlinepodcastimport page...

Server side request forgery (ssrf)

Server-side request forgery SSRF in the Podcast Importer SecondLine podcast-importer-secondline plugin 1.1.4 for WordPress via the podcastfeed parameter in a secondlineimportinitialize action to the secondlinepodcastimport page...

CVE-2020-24149

Server-side request forgery SSRF in the Podcast Importer SecondLine podcast-importer-secondline plugin 1.1.4 for WordPress via the podcastfeed parameter in a secondlineimportinitialize action to the secondlinepodcastimport page...

CVE-2020-24149

CVE-2020-24149 affects the WordPress Podcast Importer SecondLine plugin, version 1.1.4. The vulnerability is a Server-Side Request Forgery (SSRF) via the podcast_feed parameter in the secondline_import_initialize action to the secondlinepodcastimport page. Multiple sources (NVD, WPVulnDB, Patchst...